ISC CISSP-ISSAP Online Practice Questions and Exam Preparation

ISC CISSP-ISSAP Online Questions & Answers

• Question 131:

  Sam is creating an e-commerce site. He wants a simple security solution that does not require each customer to have an individual key. Which of the following encryption methods will he use?

  A. Asymmetric encryption
  B. Symmetric encryption
  C. S/MIME
  D. PGP
  B. Symmetric encryption

• Question 132:

  Which of the following intrusion detection systems (IDS) monitors network traffic and compares it against an established baseline?

  A. Network-based
  B. Anomaly-based
  C. File-based
  D. Signature-based
  B. Anomaly-based

• Question 133:

  The Public Key Infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates. Which of the following components does the PKI use to list those certificates that have been revoked or are no longer valid?

  A. Certification Practice Statement
  B. Certificate Policy
  C. Certificate Revocation List
  D. Certification Authority
  C. Certificate Revocation List

• Question 134:

  You work as a Network Administrator for NetTech Inc. The company's network is connected to the Internet. For security, you want to restrict unauthorized access to the network with minimum administrative effort. You want to implement a hardware-based solution. What will you do to accomplish this?

  A. Connect a brouter to the network.
  B. Implement a proxy server on the network.
  C. Connect a router to the network.
  D. Implement firewall on the network.
  D. Implement firewall on the network.

• Question 135:

  Which of the following keys is derived from a preshared key and Extensible Authentication Protocol (EAP)?

  A. Pairwise Transient Key
  B. Group Temporal Key
  C. Private Key
  D. Pairwise Master Key
  D. Pairwise Master Key

• Question 136:

  You are the Security Consultant and have been contacted by a client regarding their encryption and hashing algorithms. Their in-house network administrator tells you that their current hashing algorithm is an older one with known weaknesses and is not collision resistant.Which algorithm are they most likely using for hashing?

  A. PKI
  B. SHA
  C. Kerberos
  D. MD5
  D. MD5

• Question 137:

  Which of the following is a method for transforming a message into a masked form, together with a way of undoing the transformation to recover the message?

  A. Cipher
  B. CrypTool
  C. Steganography
  D. MIME
  A. Cipher

• Question 138:

  Which of the following are types of asymmetric encryption algorithms? Each correct answer represents a complete solution. Choose two.

  A. RSA
  B. AES
  C. ECC
  D. DES
  A. RSA
  C. ECC

• Question 139:

  Which of the following are the countermeasures against a man-in-the-middle attack? Each correct answer represents a complete solution. Choose all that apply.

  A. Using public key infrastructure authentication.
  B. Using basic authentication.
  C. Using Secret keys for authentication.
  D. Using Off-channel verification.
  A. Using public key infrastructure authentication.
  C. Using Secret keys for authentication.
  D. Using Off-channel verification.

• Question 140:

  Which of the following statements about Network Address Translation (NAT) are true? Each correct answer represents a complete solution. Choose three.

  A. It hides the internal IP addressing scheme.
  B. It protects network from the password guessing attacks.
  C. It is used to connect private networks to the public Internet.
  D. It shares public Internet addresses with a large number of internal network clients.
  A. It hides the internal IP addressing scheme.
  C. It is used to connect private networks to the public Internet.
  D. It shares public Internet addresses with a large number of internal network clients.